/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-monitor

  • Committer: Björn Påhlsson
  • Date: 2010-09-07 16:48:58 UTC
  • mto: (237.4.3 mandos-release)
  • mto: This revision was merged to the branch mainline in revision 421.
  • Revision ID: belorn@fukt.bsnet.se-20100907164858-tcg8hkxdj41zizac
mandos server: Added debuglevel that adjust at what level information
               should be reported.
plugin-runner, askpass-fifo, password-prompt, splasy, usplash:
               Using error instead of perror

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos-monitor
1
1
#!/usr/bin/python
2
2
# -*- mode: python; coding: utf-8 -*-
3
 
# 
4
 
# Mandos Monitor - Control and monitor the Mandos server
5
 
# 
6
 
# Copyright © 2009,2010 Teddy Hogeborn
7
 
# Copyright © 2009,2010 Björn Påhlsson
8
 
# 
9
 
# This program is free software: you can redistribute it and/or modify
10
 
# it under the terms of the GNU General Public License as published by
11
 
# the Free Software Foundation, either version 3 of the License, or
12
 
# (at your option) any later version.
13
 
#
14
 
#     This program is distributed in the hope that it will be useful,
15
 
#     but WITHOUT ANY WARRANTY; without even the implied warranty of
16
 
#     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17
 
#     GNU General Public License for more details.
18
 
# 
19
 
# You should have received a copy of the GNU General Public License
20
 
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
21
 
# 
22
 
# Contact the authors at <mandos@fukt.bsnet.se>.
23
 
# 
24
3
 
25
4
from __future__ import division, absolute_import, with_statement
26
5
 
45
24
locale.setlocale(locale.LC_ALL, u'')
46
25
 
47
26
import logging
48
 
logging.getLogger(u'dbus.proxies').setLevel(logging.CRITICAL)
 
27
logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)
49
28
 
50
29
# Some useful constants
51
 
domain = u'se.bsnet.fukt'
52
 
server_interface = domain + u'.Mandos'
53
 
client_interface = domain + u'.Mandos.Client'
54
 
version = u"1.2.3"
 
30
domain = 'se.bsnet.fukt'
 
31
server_interface = domain + '.Mandos'
 
32
client_interface = domain + '.Mandos.Client'
 
33
version = "1.0.15"
55
34
 
56
35
# Always run in monochrome mode
57
36
urwid.curses_display.curses.has_colors = lambda : False
61
40
urwid.curses_display.curses.A_UNDERLINE |= (
62
41
    urwid.curses_display.curses.A_BLINK)
63
42
 
64
 
def isoformat_to_datetime(iso):
65
 
    "Parse an ISO 8601 date string to a datetime.datetime()"
66
 
    if not iso:
67
 
        return None
68
 
    d, t = iso.split(u"T", 1)
69
 
    year, month, day = d.split(u"-", 2)
70
 
    hour, minute, second = t.split(u":", 2)
71
 
    second, fraction = divmod(float(second), 1)
72
 
    return datetime.datetime(int(year),
73
 
                             int(month),
74
 
                             int(day),
75
 
                             int(hour),
76
 
                             int(minute),
77
 
                             int(second),           # Whole seconds
78
 
                             int(fraction*1000000)) # Microseconds
79
 
 
80
43
class MandosClientPropertyCache(object):
81
44
    """This wraps a Mandos Client D-Bus proxy object, caches the
82
45
    properties and calls a hook function when any of them are
122
85
        # Logger
123
86
        self.logger = logger
124
87
        
125
 
        self._update_timer_callback_tag = None
126
 
        self._update_timer_callback_lock = 0
127
 
        self.last_checker_failed = False
128
 
        
129
88
        # The widget shown normally
130
89
        self._text_widget = urwid.Text(u"")
131
90
        # The widget shown when we have focus
135
94
            *args, **kwargs)
136
95
        self.update()
137
96
        self.opened = False
138
 
        
139
 
        last_checked_ok = isoformat_to_datetime(self.properties
140
 
                                                [u"LastCheckedOK"])
141
 
        if last_checked_ok is None:
142
 
            self.last_checker_failed = True
143
 
        else:
144
 
            self.last_checker_failed = ((datetime.datetime.utcnow()
145
 
                                         - last_checked_ok)
146
 
                                        > datetime.timedelta
147
 
                                        (milliseconds=
148
 
                                         self.properties
149
 
                                         [u"Interval"]))
150
 
        
151
 
        if self.last_checker_failed:
152
 
            self.using_timer(True)
153
 
        
154
 
        if self.need_approval:
155
 
            self.using_timer(True)
156
 
        
157
97
        self.proxy.connect_to_signal(u"CheckerCompleted",
158
98
                                     self.checker_completed,
159
99
                                     client_interface,
175
115
                                     client_interface,
176
116
                                     byte_arrays=True)
177
117
    
178
 
    def property_changed(self, property=None, value=None):
179
 
        super(self, MandosClientWidget).property_changed(property,
180
 
                                                         value)
181
 
        if property == u"ApprovalPending":
182
 
            using_timer(bool(value))
183
 
        
184
 
    def using_timer(self, flag):
185
 
        """Call this method with True or False when timer should be
186
 
        activated or deactivated.
187
 
        """
188
 
        old = self._update_timer_callback_lock
189
 
        if flag:
190
 
            self._update_timer_callback_lock += 1
191
 
        else:
192
 
            self._update_timer_callback_lock -= 1
193
 
        if old == 0 and self._update_timer_callback_lock:
194
 
            self._update_timer_callback_tag = (gobject.timeout_add
195
 
                                               (1000,
196
 
                                                self.update_timer))
197
 
        elif old and self._update_timer_callback_lock == 0:
198
 
            gobject.source_remove(self._update_timer_callback_tag)
199
 
            self._update_timer_callback_tag = None
200
 
    
201
118
    def checker_completed(self, exitstatus, condition, command):
202
119
        if exitstatus == 0:
203
 
            if self.last_checker_failed:
204
 
                self.last_checker_failed = False
205
 
                self.using_timer(False)
206
120
            #self.logger(u'Checker for client %s (command "%s")'
207
121
            #            u' was successful'
208
 
            #            % (self.properties[u"Name"], command))
209
 
            self.update()
 
122
            #            % (self.properties[u"name"], command))
210
123
            return
211
 
        # Checker failed
212
 
        if not self.last_checker_failed:
213
 
            self.last_checker_failed = True
214
 
            self.using_timer(True)
215
124
        if os.WIFEXITED(condition):
216
125
            self.logger(u'Checker for client %s (command "%s")'
217
126
                        u' failed with exit code %s'
218
 
                        % (self.properties[u"Name"], command,
 
127
                        % (self.properties[u"name"], command,
219
128
                           os.WEXITSTATUS(condition)))
220
 
        elif os.WIFSIGNALED(condition):
 
129
            return
 
130
        if os.WIFSIGNALED(condition):
221
131
            self.logger(u'Checker for client %s (command "%s")'
222
132
                        u' was killed by signal %s'
223
 
                        % (self.properties[u"Name"], command,
 
133
                        % (self.properties[u"name"], command,
224
134
                           os.WTERMSIG(condition)))
225
 
        elif os.WCOREDUMP(condition):
 
135
            return
 
136
        if os.WCOREDUMP(condition):
226
137
            self.logger(u'Checker for client %s (command "%s")'
227
138
                        u' dumped core'
228
 
                        % (self.properties[u"Name"], command))
229
 
        else:
230
 
            self.logger(u'Checker for client %s completed'
231
 
                        u' mysteriously')
232
 
        self.update()
 
139
                        % (self.properties[u"name"], command))
 
140
        self.logger(u'Checker for client %s completed mysteriously')
233
141
    
234
142
    def checker_started(self, command):
235
143
        #self.logger(u'Client %s started checker "%s"'
236
 
        #            % (self.properties[u"Name"], unicode(command)))
 
144
        #            % (self.properties[u"name"], unicode(command)))
237
145
        pass
238
146
    
239
147
    def got_secret(self):
240
 
        self.last_checker_failed = False
241
148
        self.logger(u'Client %s received its secret'
242
 
                    % self.properties[u"Name"])
 
149
                    % self.properties[u"name"])
243
150
    
244
151
    def need_approval(self, timeout, default):
245
152
        if not default:
247
154
        else:
248
155
            message = u'Client %s will get its secret in %s seconds'
249
156
        self.logger(message
250
 
                    % (self.properties[u"Name"], timeout/1000))
251
 
        self.using_timer(True)
 
157
                    % (self.properties[u"name"], timeout/1000))
252
158
    
253
159
    def rejected(self, reason):
254
160
        self.logger(u'Client %s was rejected; reason: %s'
255
 
                    % (self.properties[u"Name"], reason))
 
161
                    % (self.properties[u"name"], reason))
256
162
    
257
163
    def selectable(self):
258
164
        """Make this a "selectable" widget.
259
165
        This overrides the method from urwid.FlowWidget."""
260
166
        return True
261
167
    
262
 
    def rows(self, maxcolrow, focus=False):
 
168
    def rows(self, (maxcol,), focus=False):
263
169
        """How many rows this widget will occupy might depend on
264
170
        whether we have focus or not.
265
171
        This overrides the method from urwid.FlowWidget"""
266
 
        return self.current_widget(focus).rows(maxcolrow, focus=focus)
 
172
        return self.current_widget(focus).rows((maxcol,), focus=focus)
267
173
    
268
174
    def current_widget(self, focus=False):
269
175
        if focus or self.opened:
284
190
        # Rebuild focus and non-focus widgets using current properties
285
191
 
286
192
        # Base part of a client. Name!
287
 
        base = (u'%(name)s: '
288
 
                      % {u"name": self.properties[u"Name"]})
289
 
        if not self.properties[u"Enabled"]:
290
 
            message = u"DISABLED"
291
 
        elif self.properties[u"ApprovalPending"]:
292
 
            timeout = datetime.timedelta(milliseconds
293
 
                                         = self.properties
294
 
                                         [u"ApprovalDelay"])
295
 
            last_approval_request = isoformat_to_datetime(
296
 
                self.properties[u"LastApprovalRequest"])
297
 
            if last_approval_request is not None:
298
 
                timer = timeout - (datetime.datetime.utcnow()
299
 
                                   - last_approval_request)
300
 
            else:
301
 
                timer = datetime.timedelta()
302
 
            if self.properties[u"ApprovedByDefault"]:
303
 
                message = u"Approval in %s. (d)eny?"
304
 
            else:
305
 
                message = u"Denial in %s. (a)pprove?"
306
 
            message = message % unicode(timer).rsplit(".", 1)[0]
307
 
        elif self.last_checker_failed:
308
 
            timeout = datetime.timedelta(milliseconds
309
 
                                         = self.properties
310
 
                                         [u"Timeout"])
311
 
            last_ok = isoformat_to_datetime(
312
 
                max((self.properties[u"LastCheckedOK"]
313
 
                     or self.properties[u"Created"]),
314
 
                    self.properties[u"LastEnabled"]))
315
 
            timer = timeout - (datetime.datetime.utcnow() - last_ok)
316
 
            message = (u'A checker has failed! Time until client'
317
 
                       u' gets disabled: %s'
318
 
                           % unicode(timer).rsplit(".", 1)[0])
 
193
        self._text = (u'%(name)s: '
 
194
                      % {u"name": self.properties[u"name"]})
 
195
 
 
196
        if self.properties[u"approved_pending"]:
 
197
            if self.properties[u"approved_by_default"]:
 
198
                self._text += u"Connection established to client. (d)eny?"
 
199
            else:
 
200
                self._text += u"Seeks approval to send secret. (a)pprove?"
319
201
        else:
320
 
            message = u"enabled"
321
 
        self._text = u"%s%s" % (base, message)
322
 
            
 
202
            self._text += (u'%(enabled)s'
 
203
                           % {u"enabled":
 
204
                               (u"enabled"
 
205
                                if self.properties[u"enabled"]
 
206
                                else u"DISABLED")})
323
207
        if not urwid.supports_unicode():
324
 
            self._text = self._text.encode(u"ascii", u"replace")
 
208
            self._text = self._text.encode("ascii", "replace")
325
209
        textlist = [(u"normal", self._text)]
326
210
        self._text_widget.set_text(textlist)
327
211
        self._focus_text_widget.set_text([(with_standout[text[0]],
331
215
                                          for text in textlist])
332
216
        self._widget = self._text_widget
333
217
        self._focus_widget = urwid.AttrWrap(self._focus_text_widget,
334
 
                                            u"standout")
 
218
                                            "standout")
335
219
        # Run update hook, if any
336
220
        if self.update_hook is not None:
337
221
            self.update_hook()
338
222
    
339
 
    def update_timer(self):
340
 
        "called by gobject"
341
 
        self.update()
342
 
        return True             # Keep calling this
343
 
    
344
223
    def delete(self):
345
 
        if self._update_timer_callback_tag is not None:
346
 
            gobject.source_remove(self._update_timer_callback_tag)
347
 
            self._update_timer_callback_tag = None
348
224
        if self.delete_hook is not None:
349
225
            self.delete_hook(self)
350
226
    
351
 
    def render(self, maxcolrow, focus=False):
 
227
    def render(self, (maxcol,), focus=False):
352
228
        """Render differently if we have focus.
353
229
        This overrides the method from urwid.FlowWidget"""
354
 
        return self.current_widget(focus).render(maxcolrow,
 
230
        return self.current_widget(focus).render((maxcol,),
355
231
                                                 focus=focus)
356
232
    
357
 
    def keypress(self, maxcolrow, key):
 
233
    def keypress(self, (maxcol,), key):
358
234
        """Handle keys.
359
235
        This overrides the method from urwid.FlowWidget"""
360
236
        if key == u"+":
367
243
        elif key == u"d":
368
244
            self.proxy.Approve(dbus.Boolean(False, variant_level=1),
369
245
                                  dbus_interface = client_interface)
370
 
        elif key == u"R" or key == u"_" or key == u"ctrl k":
 
246
        elif key == u"r" or key == u"_" or key == u"ctrl k":
371
247
            self.server_proxy_object.RemoveClient(self.proxy
372
248
                                                  .object_path)
373
249
        elif key == u"s":
383
259
#             self.proxy.unpause()
384
260
#         elif key == u"RET":
385
261
#             self.open()
 
262
#        elif key == u"+":
 
263
#            self.proxy.Approve(True)
 
264
#        elif key == u"-":
 
265
#            self.proxy.Approve(False)
386
266
        else:
387
267
            return key
388
268
    
403
283
    "down" key presses, thus not allowing any containing widgets to
404
284
    use them as an excuse to shift focus away from this widget.
405
285
    """
406
 
    def keypress(self, maxcolrow, key):
407
 
        ret = super(ConstrainedListBox, self).keypress(maxcolrow, key)
 
286
    def keypress(self, (maxcol, maxrow), key):
 
287
        ret = super(ConstrainedListBox, self).keypress((maxcol, maxrow), key)
408
288
        if ret in (u"up", u"down"):
409
289
            return
410
290
        return ret
527
407
        Call this when the widget layout needs to change"""
528
408
        self.uilist = []
529
409
        #self.uilist.append(urwid.ListBox(self.clients))
530
 
        self.uilist.append(urwid.Frame(ConstrainedListBox(self.
531
 
                                                          clients),
 
410
        self.uilist.append(urwid.Frame(ConstrainedListBox(self.clients),
532
411
                                       #header=urwid.Divider(),
533
412
                                       header=None,
534
 
                                       footer=
535
 
                                       urwid.Divider(div_char=
536
 
                                                     self.divider)))
 
413
                                       footer=urwid.Divider(div_char=self.divider)))
537
414
        if self.log_visible:
538
415
            self.uilist.append(self.logbox)
539
416
            pass
557
434
        """Toggle visibility of the log buffer."""
558
435
        self.log_visible = not self.log_visible
559
436
        self.rebuild()
560
 
        #self.log_message(u"Log visibility changed to: "
561
 
        #                 + unicode(self.log_visible))
 
437
        self.log_message(u"Log visibility changed to: "
 
438
                         + unicode(self.log_visible))
562
439
    
563
440
    def change_log_display(self):
564
441
        """Change type of log display.
569
446
            self.log_wrap = u"clip"
570
447
        for textwidget in self.log:
571
448
            textwidget.set_wrap_mode(self.log_wrap)
572
 
        #self.log_message(u"Wrap mode: " + self.log_wrap)
 
449
        self.log_message(u"Wrap mode: " + self.log_wrap)
573
450
    
574
451
    def find_and_remove_client(self, path, name):
575
452
        """Find an client from its object path and remove it.
602
479
        if path is None:
603
480
            path = client.proxy.object_path
604
481
        self.clients_dict[path] = client
605
 
        self.clients.sort(None, lambda c: c.properties[u"Name"])
 
482
        self.clients.sort(None, lambda c: c.properties[u"name"])
606
483
        self.refresh()
607
484
    
608
485
    def remove_client(self, client, path=None):
685
562
                                      .join((u"Clients:",
686
563
                                             u"+: Enable",
687
564
                                             u"-: Disable",
688
 
                                             u"R: Remove",
 
565
                                             u"r: Remove",
689
566
                                             u"s: Start new checker",
690
567
                                             u"S: Stop checker",
691
568
                                             u"C: Checker OK",
724
601
ui = UserInterface()
725
602
try:
726
603
    ui.run()
727
 
except KeyboardInterrupt:
728
 
    ui.screen.stop()
729
604
except Exception, e:
730
605
    ui.log_message(unicode(e))
731
606
    ui.screen.stop()